Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251961 4 警告 イー・アクセス株式会社 - Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0314 2012-02-1 12:01 2012-02-1 Show GitHub Exploit DB Packet Storm
251962 5.8 警告 OpenNMS - OpenNMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0936 2012-02-1 11:05 2012-01-29 Show GitHub Exploit DB Packet Storm
251963 7.5 危険 Aryadad - Aryadad CMS の Default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0935 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
251964 7.5 危険 Zingiri - WordPress 用 Theme Tuner プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0934 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
251965 2.6 注意 Acidcat - Acidcat CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0933 2012-02-1 11:01 2012-01-29 Show GitHub Exploit DB Packet Storm
251966 5.8 警告 Lead Capture Page System - Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0932 2012-02-1 11:00 2012-01-29 Show GitHub Exploit DB Packet Storm
251967 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2012-0931 2012-02-1 10:08 2012-01-20 Show GitHub Exploit DB Packet Storm
251968 4.3 警告 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0930 2012-02-1 10:05 2012-01-20 Show GitHub Exploit DB Packet Storm
251969 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0929 2012-02-1 10:04 2012-01-20 Show GitHub Exploit DB Packet Storm
251970 7.2 危険 Linux - Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4330 2012-01-31 16:45 2011-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276141 - zenphoto zenphoto Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2015-2948 2024-11-21 11:28 2015-06-1 Show GitHub Exploit DB Packet Storm
276142 - blue_coat ssl_visibility_appliance_sv800_firmware
ssl_visibility_appliance_sv1800_firmware
ssl_visibility_appliance_sv3800_firmware
ssl_visibility_appliance_sv2800_firmware
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator's cookie in an https se… CWE-200
Information Exposure
CVE-2015-2855 2024-11-21 11:28 2015-05-31 Show GitHub Exploit DB Packet Storm
276143 - blue_coat ssl_visibility_appliance_sv800_firmware
ssl_visibility_appliance_sv1800_firmware
ssl_visibility_appliance_sv2800_firmware
ssl_visibility_appliance_sv3800_firmware
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remo… CWE-20
 Improper Input Validation 
CVE-2015-2854 2024-11-21 11:28 2015-05-31 Show GitHub Exploit DB Packet Storm
276144 - blue_coat ssl_visibility_appliance_sv3800_firmware
ssl_visibility_appliance_sv2800_firmware
ssl_visibility_appliance_sv1800_firmware
ssl_visibility_appliance_sv800_firmware
Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web se… NVD-CWE-Other
CVE-2015-2853 2024-11-21 11:28 2015-05-31 Show GitHub Exploit DB Packet Storm
276145 - blue_coat ssl_visibility_appliance_sv2800_firmware
ssl_visibility_appliance_sv1800_firmware
ssl_visibility_appliance_sv3800_firmware
ssl_visibility_appliance_sv800_firmware
Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers… CWE-352
 Origin Validation Error
CVE-2015-2852 2024-11-21 11:28 2015-05-31 Show GitHub Exploit DB Packet Storm
276146 - synology cloud_station client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by spec… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2851 2024-11-21 11:28 2015-05-31 Show GitHub Exploit DB Packet Storm
276147 - canonical
debian
apple
postgresql
ubuntu_linux
debian_linux
mac_os_x_server
postgresql
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash… NVD-CWE-Other
CVE-2015-3165 2024-11-21 11:28 2015-05-28 Show GitHub Exploit DB Packet Storm
276148 - linux
fedoraproject
oracle
redhat
debian
linux_kernel
fedora
linux
solaris
enterprise_mrg
debian_linux
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigu… CWE-17
Code
CVE-2015-2922 2024-11-21 11:28 2015-05-27 Show GitHub Exploit DB Packet Storm
276149 - debian
linux
canonical
debian_linux
linux_kernel
ubuntu_linux
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protectio… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2830 2024-11-21 11:28 2015-05-27 Show GitHub Exploit DB Packet Storm
276150 - ocf sxf_common_library Stack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows remote attackers to execute arbitrary code via a crafted CAD file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-2946 2024-11-21 11:28 2015-05-26 Show GitHub Exploit DB Packet Storm